Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/enwbyryacSotUS-eXE3YdFfHVCM.roa
File: enwbyryacSotUS-eXE3YdFfHVCM.roa (raw, json)
Hash identifier: B+X7JGLJX4AemODXUHdEuvIwS9YLgMNo6xfuQZdZpio=
Subject key identifier: 7A:7C:1B:CA:BC:9A:71:2A:2D:51:2F:9E:5C:4D:D8:74:57:C7:54:23
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 018CC26D82A2F9DBE01157C08E6C76C09B38
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/enwbyryacSotUS-eXE3YdFfHVCM.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.42.96.0/23 maxlen: 24
194.42.104.0/23 maxlen: 24
2a0f:340::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:82:a2:f9:db:e0:11:57:c0:8e:6c:76:c0:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7c1bcabc9a712a2d512f9e5c4dd87457c75423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:94:e2:19:f1:7b:34:82:46:b0:fe:d7:cb:
03:e8:cb:ee:34:15:02:ad:c1:c3:cf:06:da:30:c1:
c3:12:b7:d5:5c:ae:7a:c5:9f:ef:b6:b9:bc:c1:4b:
a9:1d:c2:c9:2b:5f:f8:0b:70:1b:0b:ca:8e:98:e6:
c6:56:4b:66:a0:3b:bc:e7:79:28:a6:8a:d8:a8:3c:
72:f4:9b:e6:1e:35:1c:8b:bf:29:71:28:ef:42:1a:
f4:5c:c9:81:15:b9:99:04:99:7b:f7:ee:78:da:14:
98:f6:2b:0e:a1:e1:e4:33:4c:29:ad:fd:84:d5:f2:
2f:d4:53:50:e0:5c:97:6b:19:c9:eb:f6:0d:f6:16:
e9:22:ed:df:d0:05:5a:dc:08:da:01:54:9a:c6:15:
15:48:a6:ad:49:ca:7a:47:98:00:18:d6:1f:18:59:
cf:12:8c:8e:99:26:8a:cb:f9:f6:f8:cf:31:2a:c7:
b6:cb:ca:79:1b:c9:d9:95:3f:e1:73:d9:14:d0:df:
8f:99:93:bd:d3:9e:fe:3d:7c:a9:df:8d:a2:ee:47:
8e:3f:81:8d:08:83:fb:87:63:0a:93:24:12:9a:79:
9f:33:26:39:f8:98:e6:da:2c:2b:40:91:87:05:8e:
26:04:66:13:c4:ff:93:ee:d8:66:92:9a:d9:b1:5d:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:1B:CA:BC:9A:71:2A:2D:51:2F:9E:5C:4D:D8:74:57:C7:54:23
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/enwbyryacSotUS-eXE3YdFfHVCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.96.0/23
194.42.104.0/23
IPv6:
2a0f:340::/29
Signature Algorithm: sha256WithRSAEncryption
7a:04:4b:e4:f1:42:79:cb:7d:e1:9b:42:a7:97:da:76:1d:b3:
26:3d:69:c8:35:62:24:d9:e2:72:81:3c:0d:7d:37:8f:25:6f:
78:f3:c4:92:87:a7:1d:12:9f:54:ef:a6:76:23:46:84:c7:e6:
11:80:8b:ae:e9:00:65:e0:fa:2c:42:59:ef:26:4d:a5:26:3c:
73:5e:65:f0:21:e2:cc:ca:0a:e4:f3:24:b3:df:1d:0c:7a:d0:
c8:56:f4:1d:6b:e0:ed:b3:2d:ae:24:3d:76:77:67:97:7f:63:
10:b9:e1:c7:d3:04:c3:46:6a:1f:68:47:c3:b6:ea:5a:d3:43:
1a:63:69:77:ef:37:b9:99:40:30:05:a2:9a:b4:46:95:c0:ea:
23:05:d8:30:25:2a:13:1b:ae:9b:69:49:84:5e:79:01:ef:38:
47:4c:63:2c:9c:12:20:ca:f1:f9:41:97:4a:b3:32:21:dd:82:
3b:4e:f9:4b:1a:84:a7:e6:04:82:87:11:56:48:08:df:8f:d9:
6a:0b:c0:c3:13:82:4b:94:d2:92:18:63:a9:67:ed:b9:a5:6a:
c5:58:41:4c:aa:d3:ae:ac:f8:1e:0e:b3:49:57:99:f8:38:bf:
27:ae:e8:26:37:fa:1e:52:1e:10:0d:c4:d5:09:08:b2:dc:33:
61:cb:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:05 2025 by rpki-client